Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
File:                     644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json)
Hash identifier:          lf/wsIvSkDzveqKsAkRf77NcLuftYh1+S5L0Ayq9mT0=
Subject key identifier:   17:1E:6C:66:77:FD:8B:30:D3:33:EE:C4:6E:03:51:8B:13:B9:89:B6
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Certificate issuer:       /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial:       65B8471B6945C020C4585DA75844E1D5CEF894EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
Manifest number:          19
Signing time:             Fri 29 May 2026 19:13:14 +0000
Manifest this update:     Fri 29 May 2026 19:08:14 +0000
Manifest next update:     Sat 30 May 2026 21:19:14 +0000
Files and hashes:         1: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=)
                          2: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: /woZGt1tVZydWUb4rBUMn7detUMg6qcIVmGFKnMcnL0=)
                          3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b8:47:1b:69:45:c0:20:c4:58:5d:a7:58:44:e1:d5:ce:f8:94:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
        Validity
            Not Before: May 29 19:08:14 2026 GMT
            Not After : May 30 21:19:14 2026 GMT
        Subject: CN=171E6C6677FD8B30D333EEC46E03518B13B989B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:ad:d4:2b:f4:32:98:5f:63:1d:f4:86:d1:
                    ce:08:89:7e:de:11:77:ad:bb:cd:e7:fc:d0:0d:c7:
                    09:f5:40:f4:60:da:ce:59:65:cd:1e:25:81:c1:e9:
                    fa:3b:3f:1a:39:ae:03:22:e3:d6:13:e5:44:15:aa:
                    da:e7:c5:69:23:49:ed:c2:d8:3f:ed:c4:a7:02:52:
                    41:20:99:85:19:e2:f1:43:e7:30:a7:0a:0f:28:f2:
                    78:61:0d:b3:da:05:bb:80:f6:23:55:62:df:85:31:
                    81:79:65:78:97:ee:7b:56:78:82:e2:17:68:39:79:
                    fb:fa:b2:a4:45:03:91:d6:fc:f9:83:5a:4a:48:83:
                    13:a1:88:90:66:9d:69:5b:86:2e:a7:27:a2:a6:d8:
                    d5:9e:cc:e2:bc:79:5c:93:df:b3:e4:92:04:b8:23:
                    90:f2:f7:fa:f1:47:a0:bf:17:90:0a:ca:85:b1:35:
                    68:eb:be:29:03:f3:d6:3b:0c:66:f8:66:c0:5b:84:
                    07:37:cc:66:12:06:75:22:d5:64:77:f7:56:97:29:
                    bf:68:60:a9:01:c0:01:dd:04:db:00:2a:3a:21:41:
                    38:f4:a9:58:3a:db:fc:cb:db:15:cf:dc:66:18:18:
                    c9:0e:d6:2a:26:a2:a6:e1:72:82:7a:9b:ea:6e:72:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1E:6C:66:77:FD:8B:30:D3:33:EE:C4:6E:03:51:8B:13:B9:89:B6
            X509v3 Authority Key Identifier:
                keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:e4:84:0b:92:fe:c6:01:9c:bd:16:e3:c8:ec:0e:8e:65:
         6f:27:1f:96:aa:7d:5e:54:6a:73:53:3c:5a:67:10:4f:10:52:
         3c:83:99:b1:1b:35:d0:2c:45:1d:5c:d6:51:39:49:0b:43:f8:
         6c:4b:ff:ca:6a:15:20:68:af:91:c7:ba:6e:54:a0:52:2b:7b:
         0a:44:44:9b:84:5c:5b:4b:57:f5:c4:2f:6c:33:b5:12:98:40:
         f9:c4:eb:ed:c6:84:60:2b:6d:f2:4e:34:54:d5:49:16:b4:51:
         6b:d1:70:74:1e:ef:3e:49:82:ff:f3:16:59:67:85:6b:36:3b:
         d6:a1:78:8b:ec:7c:34:ad:30:55:eb:fa:6b:5f:45:7e:b4:0a:
         1c:00:36:74:3c:81:a6:ce:79:6c:01:fb:d9:82:35:78:d2:66:
         f8:75:93:78:0c:c3:f2:26:79:bd:ce:c6:9e:b3:9f:8c:43:09:
         32:62:e1:59:61:89:f1:57:2b:63:33:9d:e6:6e:f8:44:31:ec:
         28:56:82:29:72:47:08:12:06:a9:74:e3:64:70:39:1a:01:a1:
         ce:37:19:54:2a:89:8e:07:1c:50:9b:f5:9d:18:0a:fb:f1:3c:
         15:70:97:34:6f:f1:83:ff:c1:1a:fa:b9:c1:05:d9:41:2b:1b:
         93:c6:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:56 2026 by rpki-client